upgrade
upgrade

🏦Financial Services Reporting

Key Auditing Procedures

Study smarter with Fiveable

Get study guides, practice questions, and cheatsheets for all your subjects. Join 500,000+ students with a 96% pass rate.

Get Started

Why This Matters

Auditing procedures form the backbone of reliable financial reporting in the financial services industry—and they're heavily tested because they demonstrate your understanding of how auditors actually verify what companies claim on their financial statements. You're being tested on your ability to distinguish between procedures that assess risk versus those that gather evidence, understand when auditors rely on controls versus when they test transactions directly, and recognize how professional judgment shapes every phase of an audit engagement.

Think of auditing as a structured investigation where each procedure serves a specific purpose in the evidence-gathering chain. The concepts you need to master include risk assessment logic, the relationship between controls and substantive testing, evidence sufficiency and appropriateness, and professional skepticism. Don't just memorize procedure names—know what question each procedure answers and when an auditor would choose one approach over another. That conceptual understanding is what separates strong exam performance from mere recall.


Planning and Risk Identification

Before auditors examine a single transaction, they must understand the entity and identify where things could go wrong. This planning phase determines everything that follows—the procedures selected, resources allocated, and areas of focus.

Audit Planning

  • Establishes scope, objectives, and resource allocation—the strategic roadmap that guides the entire engagement
  • Industry and business assessment identifies entity-specific risks that generic procedures might miss
  • Team assignments and timelines ensure appropriate expertise is applied to complex areas like derivatives or loan loss reserves

Risk Assessment Procedures

  • Identifies inherent and control risks that could lead to material misstatement in financial statements
  • Tailors the audit approach so procedures focus on areas most likely to contain errors or fraud
  • Combines inquiry, observation, and analytics to build a comprehensive risk profile before detailed testing begins

Materiality Determination

  • Sets quantitative thresholds for what constitutes a significant misstatement requiring auditor attention
  • Qualitative factors matter too—a small error affecting regulatory capital ratios may be material despite its size
  • Drives procedure intensity by directing more resources toward accounts where misstatements could exceed materiality

Compare: Risk Assessment vs. Materiality Determination—both happen early in planning, but risk assessment asks "where might errors occur?" while materiality asks "how big must an error be to matter?" FRQs often test whether you understand this distinction.


Evaluating Internal Controls

Auditors must determine whether they can rely on the client's own control systems or need to perform extensive transaction testing. The strength of controls directly affects how much substantive work is required.

Internal Control Evaluation

  • Assesses design and implementation to determine if controls could prevent or detect material misstatements
  • Identifies control deficiencies that may require communication to management or those charged with governance
  • Informs the audit strategy—strong controls allow reduced substantive testing in affected areas

Tests of Controls

  • Evaluates operating effectiveness by testing whether controls actually functioned throughout the period
  • Reperformance and inspection verify that control activities occurred as designed, not just as described
  • Results determine reliance—control failures shift the audit toward more extensive substantive procedures

Compliance Testing

  • Verifies adherence to laws, regulations, and policies—critical in heavily regulated financial services
  • Regulatory violations may indicate control weaknesses or create contingent liabilities requiring disclosure
  • Distinct from financial statement testing but often overlaps when non-compliance affects reported amounts

Compare: Tests of Controls vs. Compliance Testing—tests of controls focus on financial reporting controls while compliance testing addresses regulatory and policy adherence. Both evaluate whether rules are followed, but the rules themselves differ. Know which applies when an exam question mentions banking regulations versus accounting controls.


Gathering Substantive Evidence

When auditors need direct evidence about account balances and transactions, they turn to substantive procedures. These tests provide the primary basis for conclusions about whether financial statement amounts are materially correct.

Substantive Testing

  • Tests of details examine individual transactions and balances for accuracy, existence, and completeness
  • Higher-risk areas receive more attention—loan portfolios, investment valuations, and allowance estimates in financial services
  • Provides direct evidence about financial statement assertions independent of control reliance

Analytical Procedures

  • Ratio and trend analysis compares current data to prior periods, budgets, and industry benchmarks
  • Identifies unexpected fluctuations that may signal errors, fraud, or significant transactions requiring investigation
  • Cost-effective screening tool that highlights where detailed testing should focus

Confirmations

  • Third-party verification provides external evidence about account balances, terms, and existence
  • Bank confirmations and loan confirmations are especially critical in financial services audits
  • Non-responses and exceptions require alternative procedures and professional skepticism about causes

Inquiry and Observation

  • Management and staff interviews gather information about processes, unusual transactions, and judgments
  • Direct observation of controls and processes provides corroborating evidence beyond documentation
  • Cannot stand alone—must be combined with other procedures to form sufficient audit evidence

Compare: Substantive Testing vs. Analytical Procedures—both gather evidence about financial statement amounts, but substantive tests examine specific items while analytical procedures identify patterns and anomalies. Strong audits use both: analytics to target risk areas, detailed testing to verify specific amounts.


Evidence Quality and Professional Judgment

The value of audit work depends entirely on the quality of evidence gathered and the judgments applied. Auditors must ensure their conclusions rest on evidence that is both sufficient in quantity and appropriate in nature.

Audit Evidence Collection

  • Sufficiency and appropriateness are the twin standards—enough evidence of the right quality to support conclusions
  • Evidence hierarchy ranks external confirmations and physical inspection above internal documents and inquiry
  • Inspection, observation, inquiry, confirmation, recalculation, and reperformance comprise the auditor's toolkit

Sampling Techniques

  • Statistical and non-statistical methods allow conclusions about entire populations from tested samples
  • Sample design must ensure representativeness—biased samples invalidate conclusions about the population
  • Extrapolation of results projects identified errors to estimate total misstatement in untested items

Fraud Detection Procedures

  • Professional skepticism requires questioning evidence and considering fraud risk throughout the engagement
  • Management override risk receives special attention since executives can circumvent controls they designed
  • Unpredictable audit procedures help detect fraud that anticipates standard testing approaches

Compare: Sampling Techniques vs. Audit Evidence Collection—sampling is how you select items to test, while evidence collection encompasses what you do with those items and how you evaluate results. An FRQ might ask you to design a sampling approach AND explain what evidence you'd gather from selected items.


Documentation and Conclusions

The audit culminates in reviewing results, forming conclusions, and documenting the work performed. Without proper documentation, even excellent audit work loses its value for quality review and regulatory inspection.

Review of Financial Statements

  • Overall assessment evaluates whether financial statements present fairly in accordance with the applicable framework
  • Disclosure completeness ensures all required information appears and is understandable to users
  • Consistency with audit evidence confirms that conclusions from detailed testing support the overall opinion

Audit Documentation

  • Comprehensive workpapers record procedures performed, evidence obtained, and conclusions reached
  • Supports the audit opinion and demonstrates compliance with professional standards
  • Retention requirements mandate preservation for regulatory review and potential litigation

Compare: Review of Financial Statements vs. Audit Documentation—the review is the analytical conclusion about fairness of presentation, while documentation is the record of work supporting that conclusion. Both are required, but they serve different purposes: one faces outward to users, the other faces inward to reviewers.


Quick Reference Table

ConceptBest Examples
Planning PhaseAudit Planning, Risk Assessment, Materiality Determination
Control EvaluationInternal Control Evaluation, Tests of Controls, Compliance Testing
Direct Evidence GatheringSubstantive Testing, Confirmations, Inquiry and Observation
Pattern RecognitionAnalytical Procedures
Evidence QualityAudit Evidence Collection, Sampling Techniques
Professional SkepticismFraud Detection Procedures
Engagement CompletionReview of Financial Statements, Audit Documentation

Self-Check Questions

  1. Which two procedures both occur during the planning phase but address fundamentally different questions—and what question does each answer?

  2. If an auditor determines that internal controls over loan origination are weak, how would this finding affect the nature and extent of substantive testing in that area?

  3. Compare and contrast tests of controls with compliance testing: what do they share, and when would you use each?

  4. An FRQ describes unusual fluctuations in interest income relative to the loan portfolio size. Which procedure identified this issue, and what follow-up procedures would be appropriate?

  5. Why can't inquiry and observation alone provide sufficient audit evidence, and what additional procedures would strengthen conclusions based on management representations?